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SUPPLEMENTAL DECLARATION OF L.JOY GRIEBENOW 
PURSUANT TO M.P.E.P. § 715.04 
AND 37 C.F.R § 1.131 

Mail Stop: RCE 
Commissioner for Patents 
P.O. Box 1450 
Alexandria, VA 22313-1450 

I am an employee and Senior Counsel in the Legal-Intellectual Property department of 
Hewlett-Packard Company. Hewlett-Packard Company is the assignee of the above-referenced 
patent application by virtue of assignments recorded in the Assignment Records of the United 
States Patent and Trademark Office at Reel 012652, Frame 0810, and at Reel 014061, Frame 
0492. The inventor of the above-referenced patent application, John Joseph Mazzitelli, is not 
currently an employee of Hewlett-Packard Company and, therefore, is unavailable to Hewlett- 
Packard Company. Accordingly, I, L.Joy Griebenow, pursuant to M.P.E.P. §715.04, as a duly 
authorized agent of Hewlett-Packard Company, have authority to make a declaration under 37 
C.F.R. § 1.131. 



CERTIFICATE OF MAILING/TRANSMISSION (37 C.F.R. 1.8(a)) 
I hereby certify that, on the date shown below, this correspondence is being: 

MAILING FACSIMILE 



□ deposited with the United States Postal Service with 
sufficient postage as first class mail in an envelope 
addressed to: MAIL STOP: RCE, Commissioner for 
Patents, P.O. Box 1450, Alexandria, VA 22313-1450. 



Date: February 6. 2007 



□ transmitted by facsimile to the Patent and 

Trademark Office. 



Signature: 
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I enclose hereto as Exhibit A a true copy of an invention disclosure form, with dates and 
portions redacted as noted, which was received from the inventor of the above-referenced 
patent application, John Joseph Mazziteili, in the ordinary course of business as part of Hewlett- 
Packard Company's invention disclosure program. In accordance with Hewlett-Packard 
Company's invention disclosure program at that time, upon receipt of an invention disclosure 
document from an inventor, the invention disclosure document is dated with the date of receipt 
by the Legal Intellectual Property department of Hewlett-Packard Company and assigned a 
docket number. 

The invention disclosure form attached hereto as Exhibit A and directed toward the 
subject matter of the above-referenced application was prepared and provided to the Legal- 
Intellectual Property department of Hewlett-Packard Company while the inventor, John Joseph 
Mazziteili, was working in the United States for and employed by Hewlett-Packard Company. 
The invention disclosure form attached hereto as Exhibit A and directed toward the subject 
matter of the above-referenced application includes a statement made by the inventor, John 
Joseph Mazziteili, that the subject matter of the above-referenced application was incorporated 
into the Hewlett-Packard product "Total-e-Mobile 1.0." The invention disclosure form attached 
hereto as Exhibit A and directed toward the subject matter of the above-referenced application 
also includes a statement by the inventor, John Joseph Mazziteili, indicating that the Total-e- 
Mobtle 1.0 product was released on a date that occurred on or before October 31, 2000. 

I hereby declare that ail statements made herein of my own knowledge are true and that 
all statements made on information and belief are believed to be true; and further that these 
statements were made with the knowledge that willful false statements and the like so made are 
punishable by fine or imprisonment, or both, under Section 1001 of Title 18 of the United States 
Code, and that such willful false statements may jeopardize the validity of the application or any 
patent issued thereon. 
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instructions: The information contained in this document is COMPANY CONFIDENTIAL and may not be disclosed to others without prior 
authorization. Submit this disclosure to the HP Legal Department as soon as possible. No patent protection is possible until a patent application is 
authori zed, prepared, and submitted to the Government m 



Descriptive Title of Invention: HTTP Cookie Proxy 



Name of Project: Universal Session Manager 
Product Name or Number: Total-e-Mobiie 




Was a description of the invention published, or are you planning to publish? if so. the date(s) and publication(s): 

REDACT 

Was a product including the -invention announced, offered for sale, sold, or is such activity proposed? If so, the date(s) and loeation(s): 

REDACT 

Was the invention disclosed to anyone outside of HP, or will such disclosure occur? If so, the date(s) and hame(s): 

REDACT 

II any of the above situations will occur within 3 months, call \<ouc IP attorney or the Legal Department npw af UB9M919 or 970-898-4919. 



Was the invention described in a lab book or other record? If so, please identify (lawbook #, etc:)r 

REDACT 



Was the invention built.or tested? If so, the date: 
Yes, it was built in REDACT 



i and released in theTotai-e-Mobile 1.0 product in REDACT 



Was this invention made under a government contract? if sp, the agency and contract number: 

REDACT 
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Description of Invention: Please pre serve ail records of the invention and attach additional pages- for the following. Each additional page 
be signed and dated by the inventor(s) and witness(es). 

A. Description of the construction and operation of the invention (include appropriate schematic, block, & timing diagrams; drawings; samples; 
graphs; flowcharts; computer listings; test results; etc.) 

B. Advantages of the invention over what has been done before. 

C. Problems solved by the invention. . 

D. Prior solutions and their disadvantages (if available, attach copies of product literature, technical articles, patents, etc,) 
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Signature 
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Description of Invention: Please preserve all records of the invention and attach additional pages for the following. Each additional page should 

^ be signed and dated by the inventors) and witnesses). 

A. Description of the construction and operation of the invention (include appropriate schematic, block, & timing diagrams; drawings; samples; 
graphs; flowcharts; computer listings; test results; etc.) 

The HTTP Cookie Proxy is a component that is housed inside* of the Universal Session Manager-product which sits between a remote client 
device and a web server. The Universal Session Manager and its internal HTTP Cookie Proxy component is currently implemented as a 
customized listener that plugs into the HP Blueslone Universal Listener Framework (ULF). The algorithm is as follows: 

1) Accept HTTP requests from the client device (e.g., a WAP phone) 

2) Extracts a unique client identifier from that HTTP request that uniquely identifies the remote client. 

3) Adds any cookies belonging to that client to the request via an HTTP cookie header. 

4) Forwards the request (with the new HTTP cookie headers) to a web server. 

5) When the web server returns the HTTP response, the component will parse that response and extract all HTTP set-cookie headers. If any 
set-cookie headers are found, those cookies are stored in a cookie storage area for later retrieval when the client submits future HTTP requests 
(i.e. used in step 3). 

6) The HTTP Cookie Proxy passes the response unaltered back to the client 

Other than adding cookie headers to the forwarded HTTP request, no other modifications are made to the request and, no modifications are 
performed on the web server's HTTP response. By default, the cookies are stored in-process; that is to say, they are stored in the same Java 
Virtual Machine memory space as the HTTP Cookie Proxy. It is conceivable that you might want to store this cookie information in persistent 
storage (like a file system or database) for better fault tolerance. The HTTP Cookie Proxy has, therefore, been designed to allow for an 
implementation that does these things to plug in seamlessly. 

FIGURE A. 
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FIGURE A shows an example of how the Universal Session Manager (which houses the HTTP Cookie Proxy components) could be used to 
facilitate requests between a WAP phone and an HP Bluestone Universal Business Server (UBS) application. 
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FIGURE B. 




FIGURE B illustrates the Request Scenario - that is, the flow diagram that indicates how an HTTP request from a client device flows through 
the HTTP Cookie Proxy to its final destination, that being a v/eb server or application server 
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FIGURE C. 




FIGURE C illustrates the Response Scenario - that is, the flow diagram that indicates how an HTTP response from a web or application server 
flows through the HTTP Cookie Proxy back lo its requestor, that being a remote client device. 



B. Advantages of the invention over what has been done before. 

Without using this HTTP Cookie Proxy, some client devices cannot maintain state information and thus could not access certain web and/or 
application servers. The advantage to using this component is that now a device which previously had been unable to effectively use certain 
web 1 and application servers can now do so without failure. Another advantage is that the HTTP Cookie Proxy can be added to an application 
deployment without the application developer or the client device knowing that it is involved in the interaction between client and server 
Therefore, it can be added to an existing or future application deployment without requiring additional coding effort to be expended. It snaps in 
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seamlessly and invisibly to the cfient and server programs. 




C. Problems solved by the invention. 

Some client devices do not have the capability to store HTTP cookies. This can lead to problems since some web and Application Servers pass 
cookies to clients in order to maintain session and state information between requests - without the ability to store cookies on a per-client basis, 
state and session information cannot be maintained across multiple requests from the same clienL The HTTP Cookie Proxy works around this 
problem by providing a mechanism by which the cookie information is no longer required to be stored in the client device. 

. -- — - ^ — - - - - 






D. Prior solutions and their disadvantages (if available, attach copies of product literature, technical articles, patents, etc.), 

A prior solution would be to force the web/application server developer to encode the cookie information in the returned anchor and form action 
URLs. The disadvantage to this is that it requires additional work on the application developer to specifically code their applications to do this 
additional, specialized handling for the specific devices that cannot handle cookies. Another disadvantage is that the URLs, themselves may 
grow too long in length, depending on how thecookie information is encoded on the URL. Some devices may not or can not display or accept 
URL strings longer than a certain length. If that length is exceeded, the client, will again be rendered useless with respect to its ability to interact 
with the web or application server. 
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